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AMENDMENTS TO THE CLAIMS 

Please replace the claims, including all prior versions, with the listing of claims below. 
LISTING OF CLAIMS: 

1 . (Currently amended) M e tho dA method for forming an encrypted message 
containin g including communication configuration data, comprising: 

S in which executing an Internet-based authentication method is e x e cut e d by using at least one 

* * * 

service from a unit in a security layer or link control layer between a first communication unit and a 
second communication unit, so that at least one pair of cryptographic keys is formed for the first 
communication unit and for the second communication unit ?; and 

S encrypting in which the communication configuration data of the first communication unit is 
e ncrypted using at least one cryptographic key of the at least one pair of cryptographic keys, thus 
forming the encrypted message. 

2. (Currently amended) Method The method according to claim 1 , wherein 

in which the Internet-based authentication method is based on an extensible authentication protocol 
method. 



3. (Currently amended) M e thod The according to claim l-e^ wherein 

in which the communication configuration data is transmitted from the first communication unit to 
the second communication unit by using electronic messages according to the Internet-based 
authentication method. 
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4. (Currently amended) Method The method according to on e of th e claims 1 to 3, 

in which claim 1 , wherein the communication configuration data is transmitted from the first 
communication unit to the second communication unit by using electronic messages according to 
one of the following Internet-based authentication methods: 

• protected extensible authentication protocol method, 

• extensible authentication protocol tunneled TLS authentication protocol method, or 

• protocol for carrying authentication for network access method. 

5. (Currently amended) M e thod The method according to one of the claims 1 to 4, 

feclaim 1 a wherein^ whieh the first communication unit is a communication unit of a communication 
network element. 

6. (Currently amended) Method The method according to claim 5, wherein 

in which the first communication unit is a communication unit of a communication network element 
in a mobile radio communication network. 

7. (Currently amended) M e thod The method according to on e of the claims 1 to 6, 
in which claim 1 , wherein the second communication unit is a communication terminal. 



8. (Currently amended) M e thod The method according to claim 7, wherein 
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in which the second communication unit is a mobile radio communication terminal. 

9. (Currently amended) M e thod The method according to one of th e claims 1 to 8, 

in which claim 1 3 wherein the communication configuration data is encoded according to a protocol 
format of a protocol for configuring a communication terminal. 

* * « 

10. (Currently amended) Method The method according to claim 9, wherein 

in which the communication configuration data is encoded according to a protocol format of a 
protocol for dynamically configuring a communication terminal. 

1 1 . (Currently amended) Method The method according to claim 1 0, wherein 

in which the communication configuration data is encoded according to a dynamic host 
configuration protocol for dynamically configuring a communication terminal. 

12. (Currently amended) Method A method for encrypting an encrypted message 
containing including communication configuration data, comprising: 

□in which executing an Internet-based authentication method is e x e cut e d by using at least one 
service from a unit in a security layer or link control layer between a first communication unit and a 
second communication unit, so that at least one pair of cryptographic keys is formed for the first 
communication unit and for the second communication unit r; and 
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□ in which determining communication configuration data of the second communication unit-is 
det e rmined by using at least one cryptographic key of the at least one pair of cryptographic keys to 
decrypt the encrypted message containing including the communication configuration data. 

13. (Currently amended) D e vic e A device for forming an encrypted message, said-the 
encrypted message containing including communication configuration data, comprising: 

□having a key generation unit which is abl e configured to execute an Internet-based authentication 
method-by using at least one service from a unit in a security layer between a first communication 
unit and a second communication unit, so that at least one pair of cryptographic keys is formed for 
the first communication unit and for the second communication unitr ; and 

□having an encryption unit which is able configured to encrypt the communication configuration 
data by using at least one cryptographic key of the at least one pair of cryptographic keys, thus 
forming the encrypted message. 

14. (Currently amended) D e vic e A device for encrypting an encrypted message, said-the 
encrypted message containing including communication configuration data, comprising: 

□having a key generation unit which is able configured to execute an Internet-based authentication 
method-by using at least one service from a unit in a security layer between a first communication 
unit and a second communication unit, so that at least one pair of cryptographic keys is formed for 
the first communication unit and for the second communication unit ^; and 

□having a decryption unit which is abl e configured to decrypt the communication configuration data 
of the second communication unit by using at least one cryptographic 

key of the at least one pair of cryptographic keys in decrypting the encrypted message containing 
said including the communication configuration data. 
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